JP3914231B2 - Service providing system, token management method and program - Google Patents

Description

  The present invention relates to a system for providing a service using a token, a token management method, and a program.

  In recent years, many electronic voting systems have already been devised. As an electronic voting system using tokens (IC card, IC tag, etc. that stores voting rights information), Patent Document 1 describes the voter who reported the device damage on the electronic voting system. A system to quickly grasp the voting status of the company has been released.

  By the way, in the electronic voting system, the token is generally reused at the same voting venue for the reason of reducing the cost of the system. However, the system of Patent Document 1 has a problem that it is not a system that considers token reuse.

On the other hand, Patent Documents 2, 3, and 4 disclose inventions that consider token collection and reuse. However, the invention of Patent Document 2 does not consider checking the voting situation when there is a false damage report by a voter, so check whether it is damaged before voting or after voting. Can not prevent double voting as a result. In addition, the invention of Patent Document 3 has a problem that since the contents of the vote are stored in the token itself, the vote result itself cannot be confirmed if the token is lost due to the return of the token by the voter. In addition, since the invention of Patent Document 4 uses a voter ID for identifying a voter that has a one-to-one correspondence with a voting act, it is possible to check a lost vote due to takeout of a token. Being able to grasp the contents is problematic in the election system.
JP 7-57014 A JP 2002-318880 A Japanese Patent Laid-Open No. 2002-259624 JP 2004-94341 A

  This invention has been made in view of the above points, and if a token is reused and it is found that the token is lost after voting, or if there is a damage report during voting, it affects other voting results. It is an object of the present invention to provide an electronic voting system that can grasp the status of voting using a corresponding token without giving a token.

In order to solve the above problems, the present invention provides a plurality of tokens (for example, the voting card 200 in the embodiment) used when a service beneficiary uses a service, an issuing machine that issues the tokens, A service providing system configured with a service providing machine that provides a service using the token (for example, the voting machine 300 in the embodiment), wherein the issuing machine generates a unique issue number and uses it as a token. Issuing processing means for writing (for example, issuing processing section 11 in the embodiment) and first token ID confirmation means for reading token ID (for example, card ID 211 of the voting card in the embodiment) recorded in the token (for example, , The card ID confirmation unit 14) of the issuing machine 100 in the embodiment, the token ID and the issue number associated with each other. A token issuance state table that stores a token issuance state table, and the token includes a token ID storage unit that stores the token ID and an issue number storage unit that stores the issue number, and the service The providing machine includes a second token ID confirmation unit (for example, the card ID confirmation unit 315 of the voting machine 300 in the embodiment) that reads the token ID recorded in the token, and the issue number recorded in the token. And a token usage status processing means for storing a token usage status table in which the read token ID and the read issuance number are associated with each other.
Thus, by comparing the token issue status table of the issuing machine with the token usage status table of the service voting machine, it is possible to confirm whether or not voting has been performed using a lost vote by taking out the token.

Preferably, the service providing system according to the present invention includes usage right presence / absence data storage means in which the token holds data indicating presence / absence of the right to use the service (for example, voting right presence / absence flag 213 in the embodiment), The issuance processing means of the issuing machine includes usage right presence / absence data writing means for writing data indicating that the usage right presence / absence data storage means has usage rights, and the service providing machine stores the usage right presence / absence data storage. The apparatus further comprises means for permitting service provision when the data is read out from the means and indicates that the data has the right to use.
As a result, when the number of times a service can be used with a single token is determined, it is possible to prevent the service from being used more than the specified number of times.

Preferably, in the service providing system of the present invention, the token ID is printed on a housing of the token.
As a result, if the token is damaged at the service station, the token ID cannot be read from the damaged token, but the token ID printed on the token housing can be read. By comparing the token usage status tables of the provider, it is possible to grasp the usage status of the damaged token. For example, in the schematic diagram of the electronic voting system to which the present invention shown in FIG. 1 is applied, it is visually recognized from the card ID printed on the surface of the voting card that the card ID is “2”, and the voting card issue state table 21 And the current issue number “78994065” can be determined. Whether or not the damaged token has been used by sequentially searching whether or not this value is stored in the voting card usage status table 324 held by each of the plurality of voting machines as the issue number with the card ID “2”. Can be grasped.

Preferably, the service providing system of the present invention further includes a management card comprising means for storing the token ID written by the issuing machine and the issue number, and the token usage status processing means is provided from the management card. The token ID and the issue number are read out and collated with the token usage status table, and the result of the collation is notified to the outside.
As a result, by inputting the token ID into the issuing machine, connecting the management card to the issuing machine, and then connecting to the service providing machine, the service providing machine can be automatically notified of the token usage status.

Preferably, the service providing system according to the present invention further includes a management card comprising means for storing the token issue state table written by the issuing machine, wherein the token usage status processing means is configured to receive the token from the management card. The issuance state table is read out and collated with the token use state table, and data based on the collation result (for example, the voted confirmation flag in the voting card issuance state table 414 of the master card 400 in the embodiment) is used as the management card. Write to.
This allows all token usage status to be automatically collected on the management card by connecting the management card to the issuing machine and then connecting to the service provider without entering the token ID into the issuing machine. Can be made.

Preferably, in the service providing system of the present invention, the service providing machine further includes service providing machine ID storage means for storing an ID of the service providing machine (for example, a voting machine ID 323 in the embodiment), and the token The usage status processing means writes the ID of the service provider or data unique to the ID of the service provider into the management card.
Accordingly, when a plurality of service providing machines are used, a history of which token usage status extraction has been completed from which service providing machine can be stored in the management card.

Preferably, the service providing system of the present invention further comprises means for storing the token usage status table in which the token is written by the service providing machine and the ID of the service providing machine, and the token issuing state. The confirmation unit updates the token issue state table based on the token use state table of the token.
Thereby, since the service beneficiary uses the service and simultaneously collects data indicating the token usage status in the issuing machine, the usage status of the token can be grasped without interrupting the provision of the service.

Preferably, in the service providing system of the present invention, the issue numbers are consecutive values in ascending order or descending order.
Thereby, the order in which the tokens are used can be determined from the issue number without using information such as time.

Preferably, in the service providing system according to the present invention, the management card has a service providing machine ID counter for storing the ID of the service providing machine numerically, and the service providing machine has the service providing machine ID of the management card. Means for reading the value stored in the counter and writing it in the service provider ID storage means as the ID of the service provider; and means for updating the value stored in the service provider ID counter.
Thereby, when using several service provision machines, a unique number can be assigned to each service provision machine. For example, in the schematic diagram of the electronic voting system to which the present invention is applied shown in FIG. 1, it is possible to automatically assign a unique number to each voting machine using a voting machine and a management card.

  The present invention provides a plurality of tokens used when a service beneficiary uses a service, identification information is stored, an issuer that writes an issue number in the token, and a service provider that provides a service using the token The issuer generates a unique issue number, writes it to the token, reads the token ID recorded in the token, and associates the token ID with the issue number An issuance state table is generated, and the service provider reads the token ID and the issuance number recorded in the token, and generates a token use state table in which the token ID and the read issuance number are associated with each other. This is a service providing method characterized by the above.

  The present invention includes a plurality of the tokens used when a service beneficiary uses a service, an ID is stored, an issuing machine that issues the token, and a service providing machine that provides a service using the token. A service providing system configured to generate a unique issue number and write it into a token; to read out a token ID recorded in the token; and a token issue state in which the token ID is associated with the issue number A program for causing a computer to execute a step of storing a table.

  The present invention includes a plurality of tokens that are stored when an ID is stored and a service beneficiary uses a service, an issuer that writes an issue number in the token, and a service provider that provides a service using the token. A system for providing a service, comprising: a step of reading the token ID and the issue number recorded in the token; and a token usage status table in which the token ID and the read issue number are associated with each other. A program for causing a computer to execute steps.

  According to the present invention, in a service providing system using tokens, it is possible to grasp the voting status of tokens that have been damaged during the voting time or tokens that have been lost after the voting time.

The token in the present invention is a generic term for recording media in which identification information indicating that the authority to use a service (usage right) is given, and includes, for example, a storage unit, a CPU, and a communication unit. Examples include an IC card provided, a memory card composed of only a storage unit, an IC tag, and a magnetic card. The service providing system according to the present invention is a system that provides at least one service for one token to which a usage right is given. Examples of providing one service for one token to which a usage right is given include an electronic voting system and an electronic lottery. Here, an embodiment when applied to an electronic voting system using an IC card as a token will be described.
Hereinafter, a first embodiment of the present invention will be described with reference to the drawings. Note that the electronic voting system according to the present embodiment includes an issuing machine, a plurality of voting machines, a voting card, and a master card.

  FIG. 2 is a block diagram of an issuing machine 100 that issues a voting card (token) realized by an IC card, and is realized by a PC or the like. Reference numeral 10 denotes a control unit that performs the voting card issuance process by supervising the operation of the issuing machine 100, and includes an issuance processing unit 11, a voting card issuance state confirmation unit 13, and a card ID confirmation unit. Reference numeral 20 denotes a storage unit that stores a voting card issue state table 21 and a master card ID 24. A card reader / writer 30 communicates with the voting card. Reference numeral 40 denotes a display unit such as a CRT (Cathode Ray Tube) or a liquid crystal display. Reference numeral 50 denotes an input unit such as a keyboard or a mouse. Details will be described later.

  Next, the voting card 200 used in the present embodiment and subjected to issuing processing by the issuing machine 100 will be described with reference to the block diagram of FIG. Here, the voting card 200 is a device that is required when a voter votes using a voting machine in an electronic voting system. Reference numeral 210 denotes a storage unit. A non-contact communication unit 230 communicates with the card reader / writer 30 of the issuing machine 100 or the card reader / writer 340 of the voting machine 300 shown in FIG. Reference numeral 240 denotes a control unit that controls the non-contact communication unit 230 to communicate with the issuing machine 100 or the voting machine 300 and perform processing for writing or reading data in the storage unit 210.

  The storage unit 210 stores data of the card ID 211, the issue number 212, and the voting right presence / absence flag 213. The card ID 211 is unique data for each IC card, and is written when the IC card is manufactured. The issue number 212 is a unique number written by the issuing machine 100 for each issue process. The voting right presence / absence flag 213 is a flag indicating whether or not voting is possible.

  As shown in FIG. 20, a card ID is printed on the case of the voting card 200 so that the card ID can be specified even when the electronic component of the card is damaged (printed card ID 220).

  Next, the voting machine 300 used in the present embodiment will be described with reference to the block diagram of FIG. The voting machine 300 is an apparatus used when a voter performs a voting action using the voting card 200. A control unit 310 includes a voting machine ID registration unit 311, a voting card usage status processing unit 312, a voting processing unit 313, and a card ID confirmation unit 315. The control unit 310 includes a memory and a CPU (central processing unit). Reference numeral 320 denotes an OS (Operating System) 321 installed in the voting machine, a program for realizing the functions of the control unit 310 of the voting machine, an application 322 that is loaded into the memory and executed, a voting machine ID 323, The storage unit stores a voting card usage status table 324 and a master card ID 325. Reference numeral 330 denotes a removable removable recording medium that accumulates and stores the voted results, and examples thereof include a flash memory made of semiconductor, a magnetic disk, or an optical disk. A card reader / writer 340 communicates with the voting card 200. A touch panel display unit 350 has an input function using a touch panel.

  Next, the master card 400 used in this embodiment will be described with reference to the block diagram of FIG. The master card 400 is an IC card used by the administrator of the electronic voting system in this embodiment to manage the voting status. Reference numeral 410 denotes a storage unit. A non-contact communication unit 430 communicates with the card reader / writer 30 of the issuing machine 100 or the card reader / writer 340 of the voting machine 300 using an antenna or the like. Reference numeral 240 denotes a control unit that controls the non-contact communication unit 230 to communicate with the issuing machine 100 or the voting machine 300 and perform data writing or reading processing on the storage unit 410 of the master card 400.

  The storage unit 410 stores a card ID 411, a voting machine ID counter 412, a voting machine verification status table 413, and a voting card issuance status table 414. The card ID 411 is data indicating that the card is a master card, and is written when the IC card is manufactured. Details of other data will be described later.

  Next, the control unit 10 of the issuing machine 100 and the control unit 310 of the voting machine 300 will be described.

  The card ID confirmation unit 14 of the issuing machine 100 reads out the card ID 211 of the voting card 200 or the card ID 411 of the master card 400 and compares it with the master card ID 24 of the storage unit 20 to determine which card ID is detected. Judgment is made, and the process is branched based on the determination.

  The issuance processing unit 11 of the issuing machine 100 generates a unique issuance number 212 for each issuance process for the voting card 200, writes it into the storage unit 210 of the voting card 200, and enables the voting right presence / absence flag 213. .

  The voting card issuance state confirmation unit 13 of the issuing machine 100 creates and updates the voting card issuance state table 21 in which the above-mentioned issuance number 212 and the card ID 211 are associated with each other, and performs a collation process using this.

  The card ID confirmation unit 315 of the voting machine 300 reads out the card ID 211 of the voting card 200 or the card ID 411 of the master card 400 and compares it with the master card ID 325 of the storage unit 320 to determine which card ID is detected. Judgment is made, and the process is branched based on the determination.

  The voting processing unit 313 of the voting machine 300 reads the voting right presence / absence flag 213 of the voting card 200, confirms that the voting right of the voting card 200 is valid, and causes the touch panel display unit 350 to display election candidates. Then, the voting results are accumulated in the removable recording medium 330 based on the input data from the voter. This accumulation is performed, for example, by updating vote data for each candidate for election.

  The voting card usage status processing unit 312 of the voting machine 300 creates / updates a voting card usage status table 324 in which the card ID 211 and the issue number 212 of the voting card 200 are associated with each other, and performs a verification process using this.

  The voting machine ID registration unit 311 of the voting machine 300 reads the voting machine ID counter of the master card 400 immediately after activation, stores the value as the voting machine ID, and then rewrites the voting machine ID counter by adding 1.

Next, the operation of the electronic voting system described above will be described with reference to the drawings. Hereinafter, the operation at the time of installing the voting machine will be described with reference to steps S6-1 to S6-3 in the flowchart of FIG.
First, the administrator turns on the voting machine 300. Thereafter, the application 322 of the voting machine 300 is activated, and the voting machine ID registration unit 311 uses the card reader / writer 340 and the card reader / writer driver to perform a polling process for waiting for detection of an IC card (step S6). -1). Next, the administrator brings the master card 400 close to the card reader / writer 340 of the voting machine 300. Thereafter, when the IC card is detected, the voting machine ID registration unit 311 operates assuming that the detected IC card is the master card 400.

Next, the voting machine ID registration unit 311 reads the voting machine ID counter 412 of the master card 400, stores the value as a voting machine ID in the storage unit 320 of the voting machine 300, and adds 1 to the voting machine ID counter 412. Write (step S6-2). Next, the card ID confirmation unit 315 uses the card reader / writer 340 to perform a polling process for waiting for detection of an IC card (step S6-3). For example, when the initial value of the voting machine ID counter 412 of the master card 400 is “1”, voting machine IDs are sequentially given from 1 to each of the plurality of voting machines 300 by the processing of steps S6-1 and S6-2. A unique voting machine ID can be set. In the process of step S6-2, the voting machine 300 reads the card ID 411 of the master card 400 and stores it in the storage unit 320 for master card identification.

  Next, with reference to steps S7-1 to S7-5 of the flowchart of FIG. 7, a case where the manager issues a voting card with the issuing machine 100 and distributes it to the voter will be described. First, after the administrator activates the issuing machine 100, the card ID confirmation unit 14 of the issuing machine 100 waits for detection of an IC card using the card reader / writer 30 (step S7-1). The administrator brings the voting card 200 close to the card reader / writer 30, and then the card reader / writer 30 detects the voting card 200. In response to this, the card ID confirmation unit 14 reads the card ID 211 of the voting card 200 (step S7-2), and determines that the detected IC card is a voting card.

  Thereafter, the issuance processing unit 11 generates a unique issuance number for each issuance process and writes it in the storage unit 210 of the voting card 200 (step S7-3). Next, the voting card issuance state confirmation unit 13 associates the card ID 211 read out above with the issuance number 212 generated by the issuance processing unit 11 and associates the voting card issuance state table as shown in FIG. 21 is created in the storage unit 20, and the issue number is stored (step S7-4). For example, when the card ID to be processed this time is “2” and the generated issue number is “5405466”, the process of setting the issue number to “5405466” for the card ID “2” in the table of FIG. Do. Next, the issuance processing unit 11 writes 1 in the voting right presence / absence flag 213 of the voting card 200 (step S7-5) and validates the voting right. Then, the process proceeds to step S7-1.

  Next, in the case where the voter receives the voting card issued in steps S7-1 to S7-5 in FIG. 7 described above from the administrator and votes with the voting machine 300, steps S6-4 to S6-4 in the flowchart in FIG. The operation of the voting machine 300 will be described with reference to S6-10. When the voter brings the voting card 200 close to the card reader / writer 340 of the voting machine 300 and then the IC card is detected by the card reader / writer 340 (step S6-3), the card ID confirmation unit 315 reads the card ID. Then, the type of the detected IC card is determined (step S6-4).

  When it is determined as “voting card” in step S6-4, the voting processing unit 313 reads the voting right presence / absence flag 213 of the voting card 200 (step S6-5). At this time, if the voting right presence / absence flag 213 is 0, the voting processing unit 313 causes the touch panel display unit 350 to display a warning message without voting right, and the process proceeds to step S6-3. On the other hand, when the voting right presence flag 213 is 1, the voting processing unit 313 displays the candidate list on the touch panel display unit 350 and waits for input data (step S6-6). When the voter instructs voting to one candidate from the touch panel display unit 350, the voting processing unit 313 adds 1 to the candidate candidate's vote data stored in the removable recording medium 330 based on the input data. To rewrite (step S6-7). Next, the voting card usage status processing unit 312 reads the issue number 212 of the voting card 200 (step S6-8), and if the matching card ID is not in the voting card usage status table 324 shown in FIG. The card ID 211 and the issue number 212 are added to the voting card usage status table 324. If the card ID 211 and the issue number 212 already exist, the issue number corresponding to the read card ID 211 is rewritten to the read issue number 212 (step S6-9). Next, the voting processing unit 313 writes 0 in the voting right presence / absence flag 213 of the voting card 200 (step S6-10). Then, the process proceeds to step S6-3.

  As a result, as shown in the schematic diagram of FIG. 1, the issue number issued by the issuing machine 100 is stored in the used voting machine 300 when the voting card 200 is used.

Next, the administrator confirming method when the voter reports that the voting card issued in steps S7-1 to S-7-5 in FIG. 7 will be described with reference to FIG. 10 showing details of steps S7-1, S7-2, S7-a, and S7-a. When the issuing machine 100 is waiting for the detection of the IC card as described above (step S7-1), the administrator brings the master card 400 close to the card reader / writer 30 of the issuing machine 100. Thereafter, when the IC card is detected by the card reader / writer 30, the card ID confirmation unit 14 of the issuing machine 100 reads the card ID 411 (step S7-2) and detects it by comparison with the master card ID 24 of the storage unit 20. The determined IC card is determined to be the master card 400. Thereafter, the process proceeds to process A (step S7-a). Below, the case where the initial process for checking the utilization condition of a voting card is first demonstrated with reference to the flowchart of FIG. First, the voting card issuance status confirmation unit 13 of the issuing machine 100 performs initial processing for checking the voting card usage status or displays it on the display unit 40 and waits for input data from the input unit 50 (step S10-1). . When the voting card issuance state confirmation unit 13 detects that the input data is an initial processing request for checking the voting card usage state, the voting card issuance state confirmation unit 13 stores the voting card issuance state table 21 in the storage unit 20 of the issuing machine 100. The voting confirmation flag and 0 for all the verified flags in the voting machine verification status table 413 of FIG. 11 indicating whether or not the usage status of the voting machine 300 stored in the storage unit 410 of the master card 400 has been completed. Write (step S10-2). The voting machine ID of the voting machine verification status table 413 is stored in the issuing machine 100 by storing the initial value of the voting machine ID counter 412 of the master card 400, so that the initial value and the current voting machine ID counter 412 Can be automatically generated using the value. Then, an inquiry as to whether or not to check the usage status for only a specific voting card is displayed on the display unit 40 and waits for input data from the input unit 50 (step S10-3). At this time, if the input data is the card ID 211 of the specific voting card 200, only the data for the corresponding voting card in the voting card issue state table 21 (see FIG. 13) is copied to the storage unit 410 of the master card 400 ( Step S10-4). On the other hand, if it is an issue status check request for all voting cards, the entire voting card issue status table 21 is copied to the storage unit 410 of the master card 400 (step S10-5). FIG. 13 shows a case where the card ID 211 of the specific voting card 200 is “1”. In this process, since the voting card 200 is damaged, the card ID 211 is specified based on the print card ID 220 printed on the voting card 200 housing.

  Thereafter, the manager reads data indicating the use status of the voting card from the plurality of voting machines 300 using the master card 400 for which the initial processing for checking the use status of the voting card is completed. Hereinafter, steps S6-3, S6-4, S6-b, and S6-b of FIG. 6 will be described with reference to the flowchart of FIG. As described above, when the voting machine 300 is waiting for detection of an IC card (step S6-3), the administrator brings the master card 400 close to the card reader / writer 340 of the voting machine 300, and then the card reader. When the writer 340 detects the IC card, the card ID confirmation unit 315 reads the card ID 411 (step S6-4), and determines that the IC card detected based on the card ID is the master card 400. Thereafter, the process proceeds to process B (step S6-b).

  Below, with reference to the flowchart shown in FIG. 12, operation | movement of the voting machine 300 is demonstrated. Note that the process branches depending on whether or not the entire voting card issuance state table 21 is stored in the storage unit 410 of the master card 400 as a result of step S10-4 or S10-5 in FIG. In the following, first, as a result of step S10-5 in FIG. 10, when the entire voting card issuance state table 21 is stored in the storage unit 410 of the master card 400, refer to steps S12-1 to S12-3 in FIG. I will explain.

  First, the voting card usage status processing unit 312 of the voting machine 300 reads the voting card issue status table 414 of the master card 400 and determines whether data of two or more voting cards are stored (step S12-1). It is determined that data of two or more voting cards is stored. Next, the flag of the voting machine collation status table 413 (see FIG. 11) corresponding to the voting machine ID 323 is rewritten from 0 to 1 (step S12-2). Next, the voting card usage status table 324 (see FIG. 9) of the voting machine 300 is compared with the voting card issue status table 414 (see FIG. 8) of the master card 400, and the voting corresponding to the voting card 200 with the same issue number is performed. The completed confirmation flag is rewritten from 0 to 1 as shown in FIG. 14 (step S12-3). The above processing is performed for each of a plurality of voting machines.

  Thereafter, the administrator uses the issuing machine 100 to check the difference data between the voting card usage status of the voting machine 300 and the voting card issuing status table 414 stored in the storage unit 410 of the master card 400 as described above. . Hereinafter, description will be made with reference to steps S7-1, S7-2, and S7-a in FIG. 7 and steps S10-1 and S10-6 to S10-8 in FIG. First, as described above, the administrator waits for IC card detection (step S7-1), and the administrator brings the master card 400 close to the card reader / writer 30 of the issuing machine 100. Thereafter, the card reader / writer 30 detects the IC card, and the card ID confirmation unit 14 of the issuing machine 100 determines that the detected IC card is the master card 400 (step S7-2). Next, as described above, the voting card issuance status confirmation unit 13 performs initial processing for checking the voting card usage status or displays it on the display unit 40, waits for input data from the input unit 50, and then detects it. It is determined from the input data that the request is for a voting card usage status check (step S10-1). Next, the voting card issue status table 414 and the voting machine verification status table 413 of the master card 400 are read (steps S10-6 and S10-7), and all the verification flags in the voting machine verification status table 413 are “1”. For example, the voting card issuance state table 414 is displayed on the display unit 40 (step S10-9). If all are not “1”, a voting machine ID other than “1” is displayed on the display unit 40 (step S10-10).

  The administrator refers to the voting machine verification status table 22 of the issuing machine 100 updated as described above, and until the verification flag of all the voting machines 300 becomes 1, the master card 400 is transferred to another voting machine. Is detected, and steps S6-3, S6-4, S9-b in FIG. 6 and the process shown in the flowchart in FIG. 12 are repeated to update all voted confirmation flags in the voting card issue state table. Thereafter, the manager identifies the card ID 211 of the voting card reported as damaged by the above-mentioned voter by the print card ID 220, and determines whether or not the corresponding voting card has already been voted.

  On the other hand, in the following, as a result of step S10-4 in FIG. 10, the master card 400 stores only the data presented in the card ID of a specific voting card in the voting card issuance state table 21, as shown in FIG. This will be described with reference to steps S12-1, S12-4, and S12-5.

  First, the voting card usage status processing unit 312 of the voting machine 300 reads the voting card issue status table 414 of the master card 400 and determines whether data of two or more voting cards are stored (step S12-1). It is determined that data of two or more voting cards is stored. Next, the voting card issuance status table 414 for the specific voting card in the master card 400 is read out and collated with the corresponding data in the voting card usage status table 324 of the voting machine 300 (step S12-4), and the collation result is displayed on the touch panel. The data is displayed on the part 350 (step S12-5). Thereby, the administrator and the voter can check the collation result between the issuance state and the usage state with respect to the specific voting card on the voting machine 300. Note that steps S12-1, S12-4, and S12-5 may be performed on all of the plurality of voting machines 300 if necessary.

  Next, a second embodiment of the present invention will be described. The difference from the first embodiment is that the issue number is a consecutive number (serial issue number) that increases by 1, and the voting card usage status table 324 of the voting machine 300 is stored in the voting card. It is the point which collates the issuance state of a voting card and the use situation. Only the differences from the first embodiment will be described below.

  FIG. 15 is a block diagram showing a configuration of a voting card 500 used in the present embodiment. It differs from the voting card 200 used in the first embodiment in that the storage unit 510 has an area for storing the voting machine ID 511 and the voting card usage situation table 512 shown in FIG. In the voting card usage status table 512 in the initial state, the reading issue numbers are all set to 0, and 0 is written in the voting machine ID 511. FIG. 16 is a block diagram showing the configuration of the issuing machine 600 used in this embodiment. The issuer 100 differs from the issue machine 100 used in the first embodiment in that the storage unit 620 has an area for storing the check issue number 622. Here, the temporal transition of the state of each voting card when there is a false damage report at the voting venue will be described with reference to FIG. If a voter who distributed the voting card 2 reports a damage at time T to the voting card 2 issued at time t2 during voting, the ballot card 1 issued at time t1 or at time t3 The voting card 3 issued from the voting machine 300 does not use the data of the voting card utilization status table 324, and the voting card 4 issued at time t4, which is after the damage report time T of the voting card 2, or later. The use status of the voting card 2 is confirmed using the data of the voting card usage status table 324 collected by the voting card issued from the voting machine 300. Therefore, the check target issue number is the issue number of the voting card issued after the time of the damage report (issue number of the voting card 4 in FIG. 19). Note that 0 is written in the check target issue number 622 in the initial state.

  As shown in FIG. 20, a card ID is printed on the casing of the voting card 500 (printed card ID 220).

  First, the operation when the voting machine is installed will be described with reference to steps S17-1 to S17-3 in the flowchart of FIG. First, the administrator turns on the voting machine 300. Thereafter, the application 322 of the voting machine 300 is activated. Thereafter, the voting machine 300 performs the same processing as steps S6-1 to S6-3 in the flowchart of FIG. 6 (steps S17-1 to S17-3).

Next, with reference to steps S18-1, S18-3, and S18-8 to S18-11 of the flowchart of FIG. 18, a case where the manager issues a voting card with the issuing machine 100 and distributes it to the voter will be described. To do.
First, as in step S7-1 in FIG. 7, the card ID confirmation unit 14 of the issuing machine 600 waits for the detection of the IC card using the card reader / writer 30, and at the same time, requests for the voting card usage status check. From the input unit 50 (step S18-1).

  Hereinafter, a case will be described in which a usage status check request has not yet been input from the input unit 50 since activation of the issuing machine 600. When the administrator brings the voting card 500 close to the card reader / writer 30 of the issuing machine 600 and the card reader / writer 30 detects the IC card, the card ID confirmation unit 14 of the issuing machine 600 determines that the detected IC card is the voting card 500. (Step S17-3).

  Next, the voting card issuance status confirmation unit 13 of the issuing machine 600 reads the check target issuance number 622 and determines that the usage status check has not been requested since the issuing machine 600 has been started, and is 0. Thereafter, the issuance processing of steps S6-3 to S6-6 in FIG. 6 described above is performed similarly (steps S18-8 to S18-11). Thereafter, the process proceeds to operation S18-1.

Next, a case where the voter receives the voting card issued in steps S18-1, S18-3, S18-8 to S18-11 in FIG. The operation of the voting machine 300 will be described with reference to steps S17-4 to S17-12 of the flowchart. A voter brings the voting card 500 close to the card reader / writer 340 of the voting machine 300. Thereafter, the voting machine 300 performs the processing of steps S6-4 to S6-10 in FIG. 6 in the same manner (steps S17-4 to S17-10).
Next, the voting card usage status processing unit 312 of the voting machine 300 writes the voting machine ID 323 and the voting card usage status table 324 in the storage unit 510 of the voting card 500 (steps S17-11 and S17-12). Then, the process proceeds to step S17-3.

Hereinafter, a method for confirming an administrator using a voting card 500 when a voting card is issued and a damage report is received from a voter will be described with reference to a flowchart of FIG.
First, the card ID confirmation unit 18 of the issuing machine 600 waits for the detection of the IC card using the card reader / writer 30 as described above, and at the same time, requests for the use status check of the voting card from the input unit 50. While waiting (step S18-1), the administrator inputs a request for a voting card usage status check from the input unit 50.

  Next, the card ID confirmation unit of the issuing machine 600 detects a request for checking the use status of the voting card from the input unit 50, and the voting card issuance state confirmation unit 13 requests the card ID 211 of the voting card 500 that has reported the damage. Is displayed on the display unit 40, and the card ID 211 is received from the input unit 50. Then, the current issue number corresponding to the input card ID is detected from the vote card issue status table 21 (step S18-2). Thereafter, the process proceeds to operation S18-1.

  Next, the administrator performs the operations shown in steps S17-3 to S17-12 in FIG. 17 described above, in order to reuse the vote card 600 that has been voted and collected by the voter. Move closer to the card reader / writer 30. Thereafter, the card reader / writer 30 detects the IC card, and determines that the detected IC card is the voting card 500 as in step S18-3 described above.

  Next, the voting card issuance status confirmation unit 13 of the issuing machine 600 reads the issuance number 212 of the voting card 500 and compares it with the above-described check target issuance number 622 (step S18-4). As a result of the comparison, if the read issue number is smaller than the check target issue number 622 or the check target issue number 622 is 0, the process proceeds to step S18-8. On the other hand, when the read issue number 212 is larger than the check target issue number 622 and the check target issue number 622 is not 0 (initial state), the voting machine ID 511 of the voting card 500 is read, and the corresponding voting machine ID is Whether or not it has been read is determined by referring to the voting machine verification situation table 22 shown in FIG. 11 (step S18-5).

  When the collated flag in the voting machine collation status table 22 of the issuing machine 600 is 1, the process proceeds to the above-described step S18-8. On the other hand, when the collated flag is 0, the voting card usage status table 512 of the voting card 500 is read, compared with the voting card issuance status table 21, and the card ID with the same issuance number is detected, and the voting card issuance is performed. In the state table 21, the voted confirmation flag of the card ID is rewritten from 0 to 1 (step S18-6). Next, in the voting machine collation status table 22 shown in FIG. 13, the collated flag corresponding to the voting machine ID 511 read out above is rewritten from 0 to 1 (step S18-7). Thereafter, the processes in steps S18-8 to S18-11 described above are performed in the same manner, and the process proceeds to step S18-1.

  Thus, when a voter reports a damage to the voting card, the use status of the voting card that has been reported to be damaged using the data of the voting card usage status table 324 that is reliably collected from the voting machine 300 at the correct time. Therefore, it is possible to detect the true / false of the damage report as quickly as possible.

  In addition, a method for confirming the voting card usage status of a lost voting card by the same processing in the above-described embodiment will be described below. First, at the end of the voting time, the total number of collected voting cards is counted, and if there is a shortage from the initial number, the card ID of the lost voting card is confirmed with the print card ID 220. After that, in the first embodiment, when there is a damage report from the voter, it is possible to determine whether or not the lost vote card has been voted by performing the same confirmation method of the administrator. .

In the first and second embodiments described above, only one issuing machine is used. However, a plurality of issuing machines may be used by performing the following processing.
First, the issue number counter is stored in the voting card, and 0 is written in this initial value. In addition, each issuing machine generates an issue number that is different for each issuing machine. For example, when there are three issuing machines, the issuing machine ID is assigned from “1” to “3”, and the issuing number is increased by the number of the issuing machines prepared from the value of the issuing machine ID. Is "1", "4", "7" ..., Issuing machine 2 is "2", "5", "8" ... Issuing machine 3 is "3", "6", "9" ... and issue number are generated. Then, the voting card issuance counter is read and rewritten by adding 1 to this value. The voting card issuance status table stores the issuance number counter of the voting card updated as described above together with the issuance number.

  When checking whether or not a voting card has been reported or lost and the voting card has been used, the issuing machine writes the voting card issue status table of each issuing machine to the master card. At this time, each issuing machine compares the voting card issuance status table in the master card with the voting card issuance status table of the issuing machine itself, and determines which issuance counter is greater for each card ID. To do. And as a result of discrimination, if the value of the issuance counter is larger, the latest voting card issuance status is integrated with the issuing number of all the issuing machines by rewriting the issuing number and issuing counter of the corresponding card ID. Generate a table. The latest voting card issuance state table is read from the master card by the issuing machine, and the administrator grasps the latest use state of the voting card by performing the processing of the first and second embodiments in the same manner. It becomes possible. In addition, although the above-mentioned process was described about the case where several issuing machines are used, you may perform when using one issuing machine.

  In the above-described embodiment, a plurality of voting machines are used. However, operation with only one voting machine is also possible.

  In the above-described embodiment, a number that is the card ID itself is printed on the surface of the voting card. However, a unique mark may be printed on the card ID.

  Note that steps S6-9 and S6-10 in the flowchart of FIG. 6 in the above-described embodiment may be performed immediately after the operation of step S6-5. Similarly, steps S18-10 and S18-12 in the flowchart of FIG. 17 may be performed immediately after the operation of step S18-5.

  In national and local elections, polling stations are usually set up by general public employees, and polling stations are often places where network facilities such as elementary schools and gymnasiums are not equipped. On the other hand, the electronic voting system of the above-described embodiment does not require the wiring of a cable such as a LAN (Local Area Network) because the issuing machine and the voting machine are installed stand-alone as long as the power is turned on. Yes, it is easy for those who do not have knowledge of the network to install the system.

  Moreover, not all combinations of the features described in the present embodiment are essential for the solving means of the invention.

  The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes a design and the like within the scope not departing from the gist of the present invention.

It is a schematic diagram which shows that the issue number issued by the issuing machine by the 1st Embodiment of this invention is stored in a voting machine. It is a block diagram which shows the structure of the issuing machine used for the embodiment. It is a block diagram which shows the structure of the voting card | curd used for the embodiment. It is a block diagram which shows the structure of the voting machine used for the embodiment. It is a block diagram which shows the structure of the master card used for the embodiment. It is a flowchart which shows the operation | movement from the time of starting of a voting machine to the time of voting by the embodiment. It is a flowchart which shows the operation | movement of the issuing process of the issuing machine by the same embodiment. It is explanatory drawing which shows the structure of the voting card issue state table of an issuing machine by the embodiment. It is explanatory drawing which shows the structure of the voting card utilization status table of a voting machine by the embodiment. It is a flowchart which shows the operation | movement of the voting card utilization condition check of an issuing machine by the embodiment. It is explanatory drawing which shows the structure of the voting machine collation situation table of an issuing machine by the embodiment. It is a flowchart which shows the operation | movement which writes the voting card utilization condition of a voting machine to a master card by the embodiment. It is explanatory drawing which shows the structure of the part corresponding to specific card ID of the voting card issue state table of an issuing machine by the embodiment. It is explanatory drawing which shows the structure of the voting card issue state table of an issuing machine after a voting card utilization condition check is performed by the voting machine according to the embodiment. It is a block diagram which shows the structure of the voting card | curd used for the 2nd Embodiment of this invention. It is a block diagram which shows the structure of the issuing machine by the same embodiment. It is a flowchart which shows the operation | movement from the time of starting of a voting machine to the time of voting by the embodiment. It is a flowchart which shows the operation | movement of the issuing process of the issuing machine by the same embodiment. It is explanatory drawing explaining the voting card which should utilize the data of a voting card utilization status at the time of the damage report of a voting card by the embodiment. It is a figure which shows the external appearance of the voting card | curd by 1st, 2nd embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Control part 11 ... Issue processing part 13 ... Voting card issue state confirmation part 14 ... Card ID confirmation part 20 ... Memory | storage part 21 ... Vote card issue state table 24 ... Master card ID
DESCRIPTION OF SYMBOLS 30 ... Card reader / writer 40 ... Display part 50 ... Input part 100 ... Issuing machine 200 ... Voting card 210 ... Memory | storage part 211 ... Card ID
212 issuance number 213 ... voting right flag 220 ... printing card ID
230 ... Non-contact communication unit 240 ... Control unit 300 ... Voting machine 310 ... Control unit 311 ... Voting machine ID registration unit 312 ... Voting card usage status processing unit 313 ... Voting processing unit 315 ... Card ID confirmation unit 320 ... Storage unit 321 ... OS
322 ... Application 323 ... Voting machine ID
324 ... Voting card usage status table 330 ... Removable recording medium 340 ... Card reader / writer 350 ... Touch panel display unit 400 ... Master card 410 ... Storage unit 411 ... Card ID
412 ... Voting machine ID counter 413 ... Voting machine verification status table 414 ... Voting card issue status table 430 ... Non-contact communication unit 440 ... Control unit 500 ... Voting card 510 ... Storage unit 511 ... Voting machine ID
512 ... Voting card usage status table 600 ... Issuing machine 620 ... Storage unit 622 ... Checked issue number

Claims (12)

A service providing system comprising a plurality of tokens used when a service beneficiary uses a service, an issuing machine that issues the token, and a service providing machine that provides a service using the token,
The issuing machine is
An issuance processing means that generates a unique issuance number and writes it to the token;
First token ID confirmation means for reading a token ID recorded in the token;
A token issuance state confirmation means for generating a token issuance state table in which the token ID and the issuance number are associated;
The token is
Token ID storage means for storing the token ID;
An issue number storage means for storing the issue number;
The service provider is
Second token ID confirmation means for reading the token ID recorded in the token;
A token usage status processing unit that reads the issue number recorded in the token and generates a token usage status table that associates the read token ID with the read issue number;
A service providing system comprising: The token is
A usage right presence / absence data storage means for holding data indicating the presence or absence of the right to use the service;
The issuing processing means of the issuing machine is:
Use right presence / absence data writing means for writing data indicating that the right to use is stored in the use right presence / absence data storage means;
The service provider is
2. The service providing system according to claim 1, further comprising means for permitting service provision when the data is read from the usage right presence / absence data storage means and indicates that the data has a usage right.   The service providing system according to claim 1 or 2, wherein the token has the token ID printed on a casing. Further comprising a management card comprising means for storing the token identification information written by the issuing machine and the issue number written by the issuing machine corresponding to the written token ID;
The token usage status processing means reads the token ID and the issue number from the management card, compares the token ID with the token usage status table, and issues a request to notify the verification result to the outside. Item 4. The service providing system according to any one of Items 1 to 3. A management card further comprising means for storing the token issue state table written by the issuing machine;
The token usage status processing means reads the token issue status table from the management card, compares it with the token usage status table, and writes data based on the verification result to the management card. Item 4. The service providing system according to any one of Items 1 to 3. The service provider further comprises service provider ID storage means for storing the ID of the service provider,
6. The service providing system according to claim 5, wherein the token usage status processing unit writes data unique to the ID of the service providing machine or the ID of the service providing machine to the management card. The token is
Further comprising means for storing the token usage status table written by the service provider and the ID of the service provider;
The token issue state confirmation means includes
The service providing system according to claim 1, wherein the token issuing state table is updated based on the token usage state table of the token.   The service providing system according to claim 1, wherein the issue number is a continuous value in ascending or descending order. The management card has a service provider ID counter for storing the ID of the service provider numerically,
The service provider is
Means for reading the value stored in the service provider ID counter of the management card and writing it in the service provider ID storage means as the ID of the service provider;
The service providing system according to any one of claims 5 to 8, further comprising means for updating a value stored in the service provider ID counter. It consists of a plurality of tokens for storing identification information and used when a service beneficiary uses a service, an issuing machine for writing an issue number in the token, and a service providing machine for providing a service using the token. Service providing system,
Issuing machine
Generate a unique issue number and write it to the token,
Read the token ID recorded in the token,
Generate a token issue status table that associates the token ID with the issue number,
The service provider is
Read the token ID and the issue number recorded in the token,
A service providing method, comprising: generating a token usage status table that associates the token ID with the read issue number. A service configured by a plurality of tokens used when a service beneficiary uses a service, an issuing machine that issues the token, and a service provider that provides a service using the token. Providing system,
Generating a unique issue number and writing it to the token;
Reading a token ID recorded in the token;
A program for causing a computer to execute a step of storing a token issue state table in which the token ID is associated with the issue number. The ID is stored, and includes a plurality of tokens used when a service beneficiary uses the service, an issuer that writes an issue number to the token, and a service provider that provides a service using the token. A service providing system,
Reading the token ID and the issue number recorded in the token;
Storing a token usage status table associating the token ID with the read issue number;
A program that causes a computer to execute.

Images